Skip to content

5.164.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 22 Aug 21:46
· 8 commits to main since this release
5.164.0
1fabfde
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Changelog

All notable changes to this project will be documented in this file.

583 merges; 417 releases; Changelogging the last 10 commits; Full changelog at CHANGELOG.long.md

 

 

Published tags:

v6.0.0-alpha.12, v5.163.5, 5.163.5, 5.163.4, 5.163.3, 5.163.2, 5.163.1, 5.163.0, 5.162.35, 5.162.34, 5.162.33, 5.162.32, 5.162.31, 5.162.30, 5.162.29, 5.162.28, 5.162.27, 5.162.26, 5.162.25, 5.162.24, 5.162.23, 5.162.22, 5.162.21, 5.162.20, 5.162.19, 5.162.18, 5.162.17, 5.162.16, 5.162.15, 5.162.13, 5.162.12, 5.162.11, 5.162.10, 5.162.9, 5.162.8, 5.162.7, 5.162.6, 5.162.5, 5.162.4, 5.162.3, 5.162.2, 5.162.1, 5.162.0, 5.161.0, 5.160.0, 5.159.2, 5.159.1, 5.159.0, 5.158.2, 5.158.1, 5.158.0, 5.157.18, 5.157.17, 5.157.16, 5.157.15, 5.157.14, 5.157.13, 5.157.12, 5.157.11, 5.157.10, 5.157.9, 5.157.8, 5.157.7, 5.157.6, 5.157.5, 5.157.4, 5.157.3, 5.157.2, 5.157.1, 5.157.0, 5.156.1, 5.156.0, 5.155.1, 5.155.0, 5.154.0, 5.153.0, 5.152.0, 5.151.2, 5.151.1, 5.151.0, 5.150.1, 5.150.0, 5.149.2, 5.149.1, 5.148.2, 5.148.1, 5.148.0, 5.147.10, 5.147.9, 5.147.8, 5.147.7, 5.147.6, 5.147.5, 5.147.4, 5.147.3, 5.147.2, 5.147.1, 5.147.0, 5.146.0, 5.145.6, 5.145.4, 5.145.3, 5.145.2, 5.145.1, 5.145.0, 5.144.8, 5.144.7, 5.144.5, 5.144.4, 5.144.3, 5.144.2, 5.144.1, 5.144.0, 5.143.35, 5.143.34, 5.143.33, 5.143.31, 5.143.30, 5.143.29, 5.143.28, 5.143.27, 5.143.26, 5.143.25, 5.143.24, 5.143.23, 5.143.22, 5.143.21, 5.143.20, 5.143.16, 5.143.15, 5.143.12, 5.143.11, 5.143.10, 5.143.9, 5.143.8, 5.143.7, 5.143.6, 5.143.5, 5.143.4, 5.143.3, 5.143.2, 5.143.1, 5.143.0, 5.142.4, 5.142.3, 5.142.2, 5.142.1, 5.142.0, 5.141.14, 5.141.13, 5.141.12, 5.141.11, 5.141.10, 5.141.9, 5.141.8, 5.141.6, 5.141.5, 5.141.4, 5.141.3, 5.141.2, 5.141.1, 5.141.0, 5.139.0, 5.138.0, 5.137.0, 5.136.0, 5.135.0, 5.134.0, 5.133.0, 5.132.0, 5.131.0, 5.130.0, 5.129.0, 5.128.0, 5.127.0, 5.126.0, 5.125.1, 5.125.0, 5.124.1, 5.124.0, 5.123.0, 5.122.4, 5.122.3, 5.122.2, 5.121.1, 5.121.0, 5.120.2, 5.120.0, 5.119.0, 5.118.0, 5.113.0, 5.112.4, 5.112.3, 5.112.0, 5.111.0, 5.110.1, 5.109.0, 5.108.0, 5.107.2, 5.107.0, 5.106.0, 5.105.6, 5.105.4, 5.105.3, 5.105.2, 5.105.1, 5.105.0, 5.104.2, 5.104.1, 5.103.0, 5.102.1, 5.101.0, 5.100.0, 5.99.0, 5.98.8, 5.98.7, 5.98.2, 5.98.0, 5.97.1, 5.97.0, 5.96.1, 5.96.0, 5.95.0, 5.94.0, 5.93.0, 5.91.1, 5.91.0, 5.90.1, 5.90.0, 5.89.6, 5.89.3, 5.89.2, 5.89.1, 5.89.0, 5.88.4, 5.88.3, 5.88.2, 5.88.1, 5.88.0, 5.87.0, 5.86.3, 5.86.2, 5.86.1, 5.86.0, 5.85.11, 5.85.10, 5.85.9, 5.85.8, 5.85.7, 5.85.6, 5.85.5, 5.85.4, 5.85.3, 5.85.2, 5.85.1, 5.85.0, 5.84.1, 5.84.0, 5.83.2, 5.83.1, 5.83.0, 5.82.5, 5.82.4, 5.82.3, 5.82.2, 5.82.1, 5.82.0, 5.81.2, 5.81.0, 5.80.1, 5.80.0, 5.79.18, 5.79.17, 5.79.16, 5.79.15, 5.79.11, 5.79.10, 5.79.9, 5.79.8, 5.79.6, 5.79.4, 5.79.3, 5.79.2, 5.79.1, 5.79.0, 5.78.0, 5.77.1, 5.77.0, 5.76.2, 5.76.0, 5.75.1, 5.75.0, 5.74.0, 5.73.1, 5.73.0, 5.72.5, 5.72.4, 5.72.3, 5.72.2, 5.72.1, 5.72.0, 5.71.1, 5.71.0, 5.70.36, 5.70.35, 5.70.34, 5.70.33, 5.70.32, 5.70.31, 5.70.30, 5.70.29, 5.70.28, 5.70.27, 5.70.26, 5.70.25, 5.70.24, 5.70.23, 5.70.22, 5.70.21, 5.70.20, 5.70.19, 5.70.18, 5.70.16, 5.70.15, 5.70.14, 5.70.13, 5.70.12, 5.70.11, 5.70.10, 5.70.9, 5.70.8, 5.70.7, 5.70.6, 5.70.5, 5.70.4, 5.70.3, 5.70.2, 5.70.1, 5.70.0, 5.69.4, 5.69.3, 5.69.2, 5.69.0, 5.68.0, 5.67.2, 5.67.0, 5.66.0, 5.65.14, 5.65.12, 5.65.11, 5.65.10, 5.65.9, 5.65.8, 5.65.7, 5.65.5, 5.65.4, 5.65.3, 5.65.2, 5.65.1, 5.65.0, 5.64.2, 5.64.1, 5.64.0, 5.63.0, 5.62.0, 5.61.4, 5.61.3, 5.61.2, 5.61.1, 5.60.4, 5.60.3, 5.60.0, 5.59.1, 5.59.0, 5.58.1, 5.58.0, 5.57.1, 5.57.0, 5.56.2, 5.56.1, 5.55.0, 5.54.0, 5.53.0, 5.52.0, 5.51.0, 5.50.0, 5.49.0, 5.48.0, 5.47.0, 5.46.0, 5.45.2, 5.45.0, 5.44.0, 5.43.2, v5.42.0, 5.42.0, v5.41.15, 5.41.15, v5.41.14, 5.41.14, v5.41.12, 5.41.12, v5.41.10, 5.41.10, v5.41.9, 5.41.9, v5.41.8, 5.41.8, v5.41.7, v5.41.2, v5.41.1, v5.32.14, 5.14.0, 5.12.0, 5.11.12, 5.11.1, 5.11.0

 

 

[Untagged] - Jul 25, 2026 2:12:11 PM

Commit b532c2b33d0323ea4632c9895c7ff5c2796cf21e

Author: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

 

 

[Untagged] - Jul 25, 2026 2:09:38 PM

Commit 751340a45b3521b639e1b156a98f1115a1950982

Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

  • build(deps-dev): bump postcss from 8.5.16 to 8.5.23
  • Bumps postcss from 8.5.16 to 8.5.23.

updated-dependencies:

  • dependency-name: postcss
    dependency-version: 8.5.23
    dependency-type: indirect
    ...

 

 

[5.163.5] - Jul 25, 2026 2:08:39 PM

Commit 9a5c869eb44f9f0be9a990486c501e92f7c8d03b

Author: John Haugeland <stonecypher@gmail.com>

Merges [f4f9496, 8b8ad55]

  • Merge pull request #972 from StoneCypher/dependabot/npm_and_yarn/fast-uri-3.1.4
  • build(deps): bump fast-uri from 3.1.3 to 3.1.4

 

 

[Untagged] - Jul 25, 2026 2:04:35 PM

Commit 8b8ad55327e9b53df92524e431335563c7fca75f

Author: John Haugeland <stonecypher@gmail.com>

  • build(deps): bump fast-uri to 3.1.4 and release 5.163.5
  • fast-uri <= 3.1.3 is GHSA-v2hh-gcrm-f6hx (high): host confusion via a literal backslash authority delimiter. It reaches jssm through ajv, which is a runtime dependency, not a dev one -- so it installs for every consumer. GitHub's alert labels the scope 'development', which is wrong here.
  • Dependabot bumped only the lockfile, so verify-version-bump failed with 'Version unchanged: locally 5.163.4, publicly also 5.163.4' and the PR could never merge. This adds the 5.163.5 bump and the full release build that a publish requires.
  • Also bumps better_git_changelog to 1.6.21. The changelog step died with ENOBUFS here too: the tool reads 'git log --reflog', and a repo's reflog is SHARED ACROSS WORKTREES, so this 5.x tree reached the v6 branch's history and blew past node's 1 MiB default. main's apparent 126 KB of headroom was never as safe as it looked -- any sibling worktree can push a branch over on its own.

 

 

[Untagged] - Jul 25, 2026 1:33:51 PM

Commit dcc377736d08213622313a6350658b63484ebebc

Author: John Haugeland <stonecypher@gmail.com>

  • build(release): rebuild with the changelog step restored
  • First full release build to complete every stage since better_git_changelog 1.6.21 landed -- stage 7 (changelog) is the step that failed the previous two runs. All 11 stages green, 11,907 tests, size_chart conserving.
  • Only build stamps and the regenerated changelog differ from the previous commit; build_time moves every run by design.

 

 

[Untagged] - Jul 25, 2026 1:28:00 PM

Commit 2fa0b2e55eb13c1ca872280e0b4f19821a7eee9d

Author: John Haugeland <stonecypher@gmail.com>

  • build(deps): better_git_changelog 1.6.21, unblocking the changelog step
  • 1.6.20 read 'git log --reflog' with node's default 1 MiB maxBuffer, so once this repo's log output passed 1 MiB (1.10 MB on the v6 branch; main is at 922 KB) the changelog step died with ENOBUFS and took npm run build with it. 1.6.21 caps every size-scaling git read at 256 MiB.
  • Fixed upstream rather than worked around here: StoneCypher/better_git_changelog#35. main was ~126 KB from the same cliff on its own, so this was a fuse the v6 merge would have lit rather than a v6-specific problem.
  • Regenerates CHANGELOG.md and CHANGELOG.long.md, which the release job publishes as the GitHub release notes.

 

 

[Untagged] - Jul 25, 2026 11:45:10 AM

Commit 7c4d3de7e8d0802323dcea91875b5aee813b3f0f

Author: John Haugeland <stonecypher@gmail.com>

  • build(release): full release build for the 6.0.0-alpha.12 publish
  • Regenerates every tracked artifact via npm run build: root dist, the three member dists (committed for the first time -- the release job packs tracked files with no rebuild, so an untracked member dist ships an empty tarball), rolled-up typings, perf chart, site, and README.
  • README gains a 'Trying the v6 alpha' section: the v6 line publishes under the alpha dist-tag, so npm install jssm@alpha is the only way to get it and a plain npm install is unaffected.
  • The changelog step is NOT included -- better_git_changelog spawns 'git log --reflog' with node's 1MB default maxBuffer, and this branch's log output is 1.10MB. Fixing that upstream is the next step; CHANGELOG.md is unchanged from its committed state meanwhile.

 

 

[Untagged] - Jul 25, 2026 10:11:20 AM

Commit 14f102dc71c3f53523d1c00c6259160d81105225

Author: John Haugeland <stonecypher@gmail.com>

  • fix(release): publish prereleases under their own dist-tag, never latest
  • npm does not infer a dist-tag from a version's prerelease identifier: a bare 'npm publish' of 6.0.0-alpha.12 moves 'latest' to the alpha, so every 'npm install jssm' in the world resolves to a prerelease. publish_workspaces published bare, so landing v6 as an alpha would have done exactly that.
  • distTagFor derives the channel from the version -- 'alpha' for 6.0.0-alpha.12, 'latest' only for a full release -- and buildPublishArgs now requires an explicit tag rather than falling through to npm's default. One tag is computed per run from the lockstep version, so the root and its three members can never land on different channels. A numeric-only prerelease (6.0.0-12) throws rather than silently taking latest.
  • Verified by --dry-run: all four packages report 'Publishing with tag alpha'.
  • Also updates two specs that pinned counts changed by the size-chart work: the repo timeline now carries 32 repos (highlightjs/highlightjs-fsl), and collect_package_sizes tracks the five retired ecosystem packages.

 

 

[v5.163.5] - Jul 25, 2026 8:14:51 AM

Commit 3e98c20e3ad6c8363587d1d9988d048d1f9a3630

Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

  • build(deps): bump fast-uri from 3.1.3 to 3.1.4
  • Bumps fast-uri from 3.1.3 to 3.1.4.

updated-dependencies:

  • dependency-name: fast-uri
    dependency-version: 3.1.4
    dependency-type: indirect
    ...

 

 

[v6.0.0-alpha.12] - Jul 24, 2026 8:03:48 PM

Commit 81a0635f6cb4e91cc62089e8fa383cd4dc9caa9e

Author: John Haugeland <stonecypher@gmail.com>

  • ci(package-sizes): refresh the ecosystem repo timeline onto perf_results
  • The size chart draws non-npm repos as zero-mass lifespan rails, which needs their dates to travel with the archives. continue-on-error: a rate-limited lookup must not lose a night of size collection, and the chart renders fine without rails.
Assets 2
Loading